Secunia

Multiple vulnerabilities have been identified in Kerio MailServer allowing malicious people to hi-jack accounts and gain system access.

The web mail in Kerio is vulnerable to basic Cross Site Scripting in the following scripts:
/add_acl?folder=~conde0@localhost/INBOX&add_name=<malicious_script>
/do_map?action=new&oldalias=eso&alias=<malicious_script>

Multiple buffer overflows have been identified in the handling of the "showuser", "folder", and "user" parameters. This can possibly allow execution of arbitrary code, but may only be exploited by authenticated users.

Version 5.6.3 has been reported to be vulnerable.

Solution
Use a firewall or proxy server with URL filtering capabilities to filter malicious requests.

Provided and/or discovered by
David F. Madrid

Original Advisory
http://nautopia.org/vulnerabilidades/kerio_mailserver.htm

Deep Links
Links available in Customer Area